Distributed construction of quantum fingerprints 

Andris Ambainis* Yaoyun Shr 

February 1, 2008 

Abstract 

Quantum fingerprints are useful quantum encodings introduced by Buhrman, Cleve, Watrous, and de 
Wolf (Physical Review Letters, Volume 87, Number 16, Article 167902, 2001) in obtaining an efficient 
quantum communication protocol. We design a protocol for constructing the fingerprint in a distributed 
scenario. As an application, this protocol gives rise to a communication protocol more efficient than the 
best known classical protocol for a communication problem. 

1 Introduction 

The fundamental difference between quantum and classical information has been demonstrated in many 
aspects of quantum information processing. This article concerns that of communication complexity, where 
two parties, Alice, who holds x £ {0, 1}™, and Bob, who holds y £ {0, 1}", wish to compute a function f(x, y). 
The minimum amount of information they need to exchange for all considered inputs is the communication 
complexity of /. Classical communication complexity has been widely studied since its introduction by 
Yao ^2]- An excellent book on the subject is by Kushilevitz and Nisan 0. In recent years, many works 
on quantum communication complexity, also introduced by Yao |13| . have shown both the power and the 
limitations of quantum communication protocols (e.g. [SI lllp. 

We shall focus on a variant of communication complexity models called Simultaneous Message Passing 
(SMP) model, where Alice and Bob send a single message to a referee, who will then determine f(x,y). In 
an elegant paper 5 , Buhrman, Cleve, Watrous and de Wolf showed that there is quantum protocol that uses 
O(logn) qubits to compute the Equality problem, i.e., checking if x = y, in this model, while the best 
classical protocol requires 0(y / n) bits [21 1101 13]. This is the first exponential separation between quantum 
and classical communication for computing a total function. 

At the heart of their protocol is an interesting quantum object called quantum fingerprint. For any 
z e {0, 1}", the quantum fingerprint of z is \h z ) — -4= X)™=r( — l) Zi N)j where Zi is the ith bit of z. The first 
step in the protocol is to encode inputs z t—> z' € {0, l} fen by a linear code that has code distance > Xkn, 
where k is an integer and A > 0. Then Alice sends \h x ') and Bob sends \h y i), upon receiving which the 
referee will check if |(frx'|^v)| = 1 or bounded away from 1. This gives the answer for whether x = y. 

In this paper we consider the communication complexity of constructing \h x+y ) in the SMP model. That 
is, Alice sends a message \4> x ), and Bob \4> y ), to the referee, who will construct a (mixed) state close to that 
of I h x +y)- Our main result is the following. 
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Theorem 1.1. Suppose that Alice holds x € {0, 1}™ and Bob holds y € {0, 1}™. For any constant e > 0, 
there is a SMP protocol of 0(y/n log n) qubits with success probability > 1 — e, and if the protocol succeeds 
the mixed state p of the referee satisfies (h x+y \p\h x+y ) > 1 — 0(l/y/n). 

The Equality problem can be generalized to the co-linear checking problem Linfc, where k players, who 
hold n bit strings x\, X2, ■■ • , Xk, would like to check if J2i=i x i = 0j by sending a single message from each 
of them to a referee. 

Several variants of co-linearity testing are possible. We can require 2J»=i %i = with addition in Z"% 
(bitwise XOR of n-bit strings), in Zm (modulo some integer N > 2") or, more generally, with addition in 
some group G. If addition is in Z%, there is a classical protocol for Lin4 that communicates 0(n 3 / 4 ) bits 
and for Link that communicates 0(n( fe ~ 1 ^ fc ) bits. (The protocol is a simple generalization of Equality 
protocol in [21 111)1 13). ) We do not know if this protocol is optimal. For addition in Zjy or arbitrary groups, 
no classical protocol with o(n) communication is known. (The simple generalization of Equality protocol 
no longer works.) In contrast, 

Theorem 1.2. For any Abelian group G, \G\ < 2 n there is a 0(^/nlogn) qubit quantum protocol for Lin^ 
with addition in group G. 

This improves over the best known classical protocols both for Z^ and for arbitrary group G. The proof 
for Z% is a straightforward combination of [5] with our distributed fingerprint construction. The proof for 
arbitrary G requires a different construction of fingerprints. 

We can also generalize Theorems 11.11 and 11.21 to larger number of players. If k players would like to 
construct a fingerprint for the sum of k inputs, each of them belonging to one party, it suffices to communicate 
0(n 1-1 / fc logn) qubits. As a consequence, this gives an 0(n 1_1 / fc logrt) communication protocol for Lin2k, 
for any Abelian G, \G\ < 2". 

2 Protocol for distributed fingerprinting 

We shall prove Theorem II . II first, then discuss what the protocol can be used for. 

Proof of Theorem \l.l\ The protocol is as follows (we do not scale a pure state to be a unit vector). Alice 
sends the state 

AC[n],\A\=Vn 

to the referee and Bob sends 

E (-1) E «* W |B>. 

BC[n],|B|=Vn 

This requires communicating log (Jy = Q(y/n\ogn) qubits. 

After receiving the states from Alice and Bob, the referee projects the state to the subspace spanned by 
satisfying |An B\ = 1. If he gets a state not in this subspace, he outputs "fail". The probability of 
not failing is just the probability that two random sets of size y/n have intersection of size 1. This probability 
is at least 1/e. Therefore, by repeating the protocol for a constant times, the probability that all pairs of 
messages fail can be made arbitrary small. If the protocol does not fail for a pair of messages, the remaining 
state is 

10) = y, * 4( _i)£, 6B =£(-ir 3+w bm) 

A,BQ[n], j 

\A\ = \B\=y/ii, 

\AnB\ = l 
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where 

|&>= Yl (-l)^x*(_i)E <6B ,i«|A')|B'). 

A',B'C[n], 
|A'|=|B'|=VS-1, 
|A'nB'|=Oj^A'j^B' 

Let 

I0o> = E (-i) E ^' x< (-i) Ei6B,m i^)|s / )- 

A',B'C[n], 
|A'|=|-B'|=aA-1, 

|A'ns'|=o 

Then, (0,-|0 o ) = I-O(-t^). Therefore, the inner product between |0) and £,(-l) x J" + *l j)<8|0 o ) is 1-0(4=) 
and tracing out the second part of |0) leaves the first part in a mixed state having overlap 1 — 0{-^=) with 
the state \ip) = E^-l)*^ U)- 

We refer to the above protocol by Protocol 1. 

Corollary 2.1. Let \ip) — X)™=i( — l) Xi+Vi \i) with Alice holding x±,...,x n and Bob holding yi, . . . ,y n . 
Then, Alice, Bob and referee can generate a mixed state p such that (ip\p\ip) > 1 — 0(-^=) by communicating 
0(yfn log 2 n) qubits from Alice and Bob to referee. 

Proof. We can repeat Protocol 1 [j- Inn] times. Then, the probability that all [i- Inn] executions fail is 

(l_ e )rAtonl < e ^ = i 

and, if at least one of them does not fail, we can take the state p output by the first execution which does 
not fail and it satisfies (ip\p\ip) > 1 — 0(-^=). □ 

Remark 2.2. The result generalizes to the case with k parties instead of Alice and Bob. Assume that we 
have k parties with the i th party holding the input x l = (x\, . . . , x l n ). They want to generate the state 

n 

|V>)=£(-l) E *= ia %> 
3=1 

by sending messages to a referee ((fc + l) st party). Then, we can show that the k parties together with the 
referee can generate a state p satisfying (tf)\p\ip) = 1 — 0{~h=) by communicating 0(n~k~ log 2 n) qubits. To 

do that, they perform a similar protocol using subsets of size n~^~ instead of n= . Specifically, the i th party 
sends the uniform superposition 

E (-i) E '^ x W 

A l <Z[n],\A i \=n 1 - 1 / k 

Then with at least a constant probability, ["L—i -^i contains exactly one element, in which case the protocol is 
considered successful. The proof for Theorem II . II can be modified accordingly to show that this generalized 
protocol works for k parties. 

3 Application: colinearity testing in 

We now prove the theorem II . 21 when addition is in , following the approach of 

Choose a linear error correcting code that maps z S {0, 1}" to z' € {0, l} kn , and the code distance > Xkn, 
for some integer k and some real number A > 0. Such codes exist Let e be a small constant. 



3 



Then we run Protocol 1 with success probability > 1 — e among Players 1 and 2, and the referee to 
construct the fingerprint for x\ + x' 2 , and run Protocol 1 with success probability > 1 — e among Players 3, 
4, and the referee to construct the fingerprint for x' 3 + x\. Finally the referee runs the SWAP test |S] on the 
two fingerprints to check if 4. Then, the probability of making error is 0(e) in addition 

to the probability that the SWAP test makes error. Therefore, the overall error probability can be made 
arbitrary small by a repetition of the protocol. 



4 Application: colinearity testing in arbitrary G 

The key difference is that Players 1 and 2 now have to generate a fingerprint for x\ + x' 2 , with addition taken 
in group G. This requires a different construction of fingerprints pQ. 

Let G be a finite Abelian group. Let Xi(ff) be the group characters of G. We take 

m 
z=l 

as the fingerprints, with m = 0(log \G\) and \i, ■ ■ ■ , Xm being m different characters of G. It can be shown 
that 

Theorem 4.1. Q/ For Xi, ■ ■ ■, Xm chosen uniformly at random among all characters of G, we have 
\{hg\hgi)\ < e for all g, g' , g 7^ g' , with high probability. 

We now show a distributed construction for the new fingerprints. 

Theorem 4.2. If Alice and Bob are given group elements g\, g 2 , they can construct \h^ 1+g2 ) with 0(n 1//2 logn) 
bit communication. 

Proof. Alice sends 

E I[xi(9i)\A). 

AC[m], ieA 
\A\=^/TK 

Bob sends 

E I[Xi(92)\B). 

BC[m], ie-B 
|B|=Vm 

The referee projects the state to the subspace spanned by |^4)|-B) satisfying \Af] B\ = 1. If he gets a state 
not in this subspace, he outputs "fail" . Again, he does not fail with a constant probability. If the protocol 
does not fail, the remaining state is 

W= E HXi(9i)l[xi(92)\A}\B). 

A,BC[n], i£A ieB 

\A\ = \B\=y/H, 

|AOB|=l 

By the multiplicative property of group characters, Xj (5i)Xj (52) = Xji.9i + 92)- Therefore, 

10 = E Xj{9i + 92)13)1^} 
je[m] 

where 

10)= e n xm n xma'^b'). 

A'.B'C[n], ieA' i£B' 

\A'\ = \B>\=y/n-l, 
\A'nB'\=0,j<tA',j$.B< 
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The rest of proof is similar. We use 0(m 1 / 2 logm) qubits of communication and, since m = 0{n), the 
theorem follows. □ 

The protocol for Lin^ (Link) for arbitrary Abelian G is the same as before, with the construction of 
theorem 14. 21 instead of theorem ll.il 



5 Conclusion 

We have shown how to construct a quantum fingerprint with 0(yfn\ogn) communication in two-party case 
and with 0(n 1_ * logn) communication in fc-party case. We conjecture that 0(-\/n) is a lower bound for 
two-party case and Vl(n l ~k ) is a lower bound for fc-party case. However, showing a lower bound better than 
ri(logn) is an open problem. 

Another open problem is: can we construct quantum fingerprints with o(n) communication if we require 
our protocol to be exact? That, the state output by the protocol has to be exactly the fingerprint and not 
just a state close to fingerprint. For applications, a state close to fingerprint suffices because it can only add 
an 0(— =) term to the error probability. However, it would be of theoretical interest to know if an exact 
protocol is possible. Also, understanding exact protocols could be the first step toward proving that our 
protocol is optimal or nearly-optimal among all protocols. 

We note that, in other settings, exact quantum algorithms can be more difficult than quantum algorithms 
with small error. For example, Grover's algorithm [7] can search with 0(y / n) queries but any zero-error 
quantum search algorithm requires n queries 0]. 
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